Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DC3348460A211F0AEA385BEDAE4EC9C.roa
File: 9DC3348460A211F0AEA385BEDAE4EC9C.roa (raw, json)
Hash identifier: +/fhUFmPj7Civ3ENOeTqf+MK8p5yyUF+pGeG/W4KuzA=
Subject key identifier: EA:0C:6D:EE:23:42:1E:50:40:D6:53:C7:F1:83:58:D3:62:70:1A:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01651E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DC3348460A211F0AEA385BEDAE4EC9C.roa
Signing time: Mon 14 Jul 2025 11:06:40 +0000
ROA not before: Mon 14 Jul 2025 11:06:35 +0000
ROA not after: Thu 24 Jul 2025 11:06:35 +0000
asID: 139646
IP address blocks: 45.200.14.0/23 maxlen: 24
45.200.16.0/23 maxlen: 24
45.200.18.0/23 maxlen: 24
45.200.20.0/22 maxlen: 24
45.200.24.0/21 maxlen: 24
45.200.32.0/19 maxlen: 24
45.201.214.0/23 maxlen: 24
45.201.216.0/21 maxlen: 24
45.201.224.0/21 maxlen: 24
45.204.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91422 (0x1651e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 14 11:06:35 2025 GMT
Not After : Jul 24 11:06:35 2025 GMT
Subject: CN=6874e4c0-ae1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d4:2c:d9:f5:46:5b:4f:07:e9:ee:72:fa:c1:
71:4b:37:a2:9f:4d:22:43:ea:17:8e:d0:b4:8e:24:
56:f9:f7:30:8c:af:18:60:cb:5a:4d:12:9e:11:7e:
f5:bb:11:66:b0:27:12:73:11:94:a8:3b:48:90:8b:
1f:bb:c3:f4:87:73:99:b8:7e:28:ba:a8:9b:ca:d5:
b2:28:3e:10:4b:f3:aa:36:5d:17:13:31:a1:db:52:
bb:2b:2d:01:1c:2c:22:2d:cf:f5:21:33:04:32:bb:
bd:1a:f9:f2:81:4e:41:74:44:7a:a3:e0:dd:26:72:
92:77:2f:0c:9c:6c:b5:99:65:5a:01:c0:d7:33:63:
82:4a:68:20:24:72:73:80:b5:b7:14:39:cd:c2:9d:
8f:8f:a1:24:60:34:37:61:50:ce:54:14:73:bc:df:
65:f0:2a:fe:9d:19:83:36:c1:ad:73:68:84:4c:45:
5f:c6:1c:d1:70:8d:a0:4b:45:51:b1:59:23:e2:aa:
a5:ff:73:23:5e:13:6a:dc:9c:f7:79:07:22:4b:78:
c1:a4:f4:30:9f:e4:74:5a:ef:cf:2a:cf:29:c8:1e:
63:28:4d:b9:f2:0d:86:d9:cd:bf:b9:eb:ad:80:ae:
ae:43:13:4d:08:7f:8a:e9:b3:45:2d:40:17:a8:8a:
86:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0C:6D:EE:23:42:1E:50:40:D6:53:C7:F1:83:58:D3:62:70:1A:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DC3348460A211F0AEA385BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.14.0-45.200.63.255
45.201.214.0-45.201.231.255
45.204.0.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:e8:65:b2:eb:07:f5:87:dc:d7:5d:3b:65:cb:15:71:51:f4:
ef:b1:0b:3c:f1:b1:12:c0:86:bd:87:a8:b0:f5:03:fb:22:81:
09:28:be:64:c4:52:9a:4e:71:4e:fa:42:d5:c8:ab:a1:d6:07:
4f:bb:c5:1d:27:03:d4:6e:1d:67:70:f7:24:e7:4c:b3:05:30:
6e:e2:33:d4:64:25:d5:5a:49:0e:17:10:0d:56:11:84:49:0e:
ae:6e:91:d4:2c:34:f4:1e:d7:69:77:72:d7:5b:d5:fd:a4:c1:
cc:39:70:51:83:32:7f:a3:6f:c9:81:81:12:35:c6:ca:d0:b6:
cf:1a:5b:4b:6e:c0:70:cf:32:ad:b2:c7:b7:0c:e5:ab:0f:8d:
56:be:a0:35:12:ce:39:27:c8:f6:6a:1f:01:c8:5d:8a:b3:86:
12:49:7e:48:55:54:26:48:11:81:e7:09:5a:9d:d3:e2:3c:69:
6f:a3:eb:18:dc:3e:05:c7:7c:11:fa:06:e3:8b:2c:be:5c:b9:
4f:df:a7:9d:83:a5:9e:d6:dd:d8:fa:11:e5:f3:97:aa:7f:40:
c2:d4:56:ff:45:1e:9f:8e:38:b7:81:81:66:7a:1d:54:c1:03:
2f:84:ec:3f:3b:29:14:e6:cc:ef:4d:b0:2b:a7:36:ed:17:9f:
40:32:7d:53
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIDAWUeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzE0MTEwNjM1WhcNMjUwNzI0MTEwNjM1WjAYMRYw
FAYDVQQDEw02ODc0ZTRjMC1hZTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs9Qs2fVGW08H6e5y+sFxSzein00iQ+oXjtC0jiRW+fcwjK8YYMtaTRKe
EX71uxFmsCcScxGUqDtIkIsfu8P0h3OZuH4ouqibytWyKD4QS/OqNl0XEzGh21K7
Ky0BHCwiLc/1ITMEMru9GvnygU5BdER6o+DdJnKSdy8MnGy1mWVaAcDXM2OCSmgg
JHJzgLW3FDnNwp2Pj6EkYDQ3YVDOVBRzvN9l8Cr+nRmDNsGtc2iETEVfxhzRcI2g
S0VRsVkj4qql/3MjXhNq3Jz3eQciS3jBpPQwn+R0Wu/PKs8pyB5jKE258g2G2c2/
ueutgK6uQxNNCH+K6bNFLUAXqIqGDwIDAQABo4ICvjCCArowHQYDVR0OBBYEFOoM
be4jQh5QQNZTx/GDWNNicBrfMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85REMzMzQ4NDYwQTIxMUYwQUVBMzg1QkVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAEtyA4DBAYtyAAwDAMEAS3J
1gMEAy3J4AMEAC3MADANBgkqhkiG9w0BAQsFAAOCAQEAu+hlsusH9Yfc1107ZcsV
cVH077ELPPGxEsCGvYeosPUD+yKBCSi+ZMRSmk5xTvpC1cirodYHT7vFHScD1G4d
Z3D3JOdMswUwbuIz1GQl1VpJDhcQDVYRhEkOrm6R1Cw09B7XaXdy11vV/aTBzDlw
UYMyf6NvyYGBEjXGytC2zxpbS27AcM8yrbLHtwzlqw+NVr6gNRLOOSfI9mofAchd
irOGEkl+SFVUJkgRgecJWp3T4jxpb6PrGNw+Bcd8EfoG44ssvly5T9+nnYOlntbd
2PoR5fOXqn9AwtRW/0Uen444t4GBZnodVMEDL4TsPzspFObM702wK6c27RefQDJ9
Uw==
-----END CERTIFICATE-----
Generated at Sun Jul 20 13:33:21 2025 by rpki-client